Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3138352e3132302e302f32332d3233203d3e20323639303936.roa
File:                     34352e3138352e3132302e302f32332d3233203d3e20323639303936.roa (raw, json)
Hash identifier:          ZbjYxRhhPIIrV0EoupzrI9nIznj4TaNh3A76ykQdLT4=
Subject key identifier:   05:D1:5C:CE:9A:D5:D3:73:43:9F:2F:07:88:7B:D8:11:CD:ED:3C:AE
Certificate issuer:       /CN=824C1C971930641F52CF76D6607DED5BB03BA15F
Certificate serial:       5D5B0C497D661B4E559857418103DEB7751A1B6A
Authority key identifier: 82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3138352e3132302e302f32332d3233203d3e20323639303936.roa
Signing time:             Wed 05 Apr 2023 15:01:29 +0000
ROA not before:           Wed 05 Apr 2023 14:56:29 +0000
ROA not after:            Wed 03 Apr 2024 15:01:29 +0000
asID:                     269096
IP address blocks:        45.185.120.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5b:0c:49:7d:66:1b:4e:55:98:57:41:81:03:de:b7:75:1a:1b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824C1C971930641F52CF76D6607DED5BB03BA15F
        Validity
            Not Before: Apr  5 14:56:29 2023 GMT
            Not After : Apr  3 15:01:29 2024 GMT
        Subject: CN=05D15CCE9AD5D373439F2F07887BD811CDED3CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:9c:df:9f:8b:8b:61:02:b5:c8:86:03:a1:
                    09:8e:37:8e:59:9f:a6:4a:ab:20:5e:1f:37:c3:d4:
                    45:c1:9d:6a:89:61:21:4c:5b:6f:9b:d1:eb:0c:86:
                    d2:7c:da:99:0e:b0:0b:33:d6:22:b1:24:0a:53:e4:
                    83:97:55:eb:1a:b8:d5:ae:c5:61:cf:1b:22:b4:a4:
                    c1:30:2d:07:9c:e2:68:63:46:af:18:e4:9e:d5:38:
                    b3:45:c0:68:c1:d4:a7:d5:9f:54:12:eb:34:e6:25:
                    38:63:1e:86:7a:3d:bb:46:24:d1:ec:2b:0c:7c:6a:
                    00:65:44:d2:55:51:1b:e8:11:f9:b4:56:93:b1:d3:
                    5f:67:b2:ca:9f:63:a1:4a:87:b1:9a:65:8a:a5:08:
                    04:05:b3:f6:f0:c7:04:59:5b:53:80:b3:c6:4f:ac:
                    57:22:aa:94:24:cb:ce:92:e4:a4:ff:75:8f:cd:25:
                    2e:b8:fa:5a:63:37:3a:85:d1:7b:33:47:7f:d3:f1:
                    5b:34:79:5e:81:28:bf:18:38:df:23:cc:64:89:5e:
                    b3:30:47:8e:c2:4e:72:be:3f:aa:3a:4e:a7:43:f9:
                    fd:3c:84:01:07:62:05:8a:52:bb:1f:8a:f8:53:d4:
                    22:01:f0:f9:fe:45:91:fa:ee:e3:09:38:a9:ac:57:
                    59:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D1:5C:CE:9A:D5:D3:73:43:9F:2F:07:88:7B:D8:11:CD:ED:3C:AE
            X509v3 Authority Key Identifier:
                keyid:82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/824C1C971930641F52CF76D6607DED5BB03BA15F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3138352e3132302e302f32332d3233203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:7b:82:12:8c:8d:1e:03:ba:7c:20:20:74:e6:83:9c:90:43:
         33:85:21:75:6f:cc:ef:b9:05:af:2d:c8:db:e7:87:6f:46:71:
         2b:96:34:fc:e9:b0:aa:ae:8e:24:f2:a7:79:52:e5:60:c1:fc:
         79:e6:cd:0a:0f:3e:66:48:c7:20:07:e7:d6:02:e1:75:72:12:
         73:80:2f:a4:60:f5:76:74:e4:e5:a9:1f:41:3e:4c:c3:82:3c:
         1f:cf:f2:bf:a2:68:a3:bc:94:00:4d:91:a6:35:44:70:13:0a:
         aa:f7:89:2e:17:d8:ef:e7:dd:5e:f6:a1:db:0e:6e:d9:06:22:
         6c:5a:49:92:06:df:79:aa:f0:db:1c:c3:d2:83:b3:e7:6e:cc:
         32:7c:3d:f3:03:52:bf:a4:72:06:99:3f:f8:8e:c5:70:87:64:
         63:6b:77:c3:9a:6a:58:4e:be:41:6a:36:4e:1e:52:07:de:b6:
         ce:04:50:0c:8c:2b:e3:3a:1d:82:93:c2:d9:3f:38:c6:03:d4:
         a1:92:78:02:f1:ab:95:d8:2b:3f:ad:29:9e:2c:46:21:a1:8f:
         63:47:0c:4c:e3:a9:32:11:c0:52:9d:01:cb:d3:50:4d:6d:59:
         43:aa:ef:b6:a1:75:dd:dc:ee:b1:b2:b6:33:b2:9a:4e:68:69:
         8f:15:0e:9d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXVsMSX1mG05VmFdBgQPet3UaG2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI0QzFDOTcxOTMwNjQxRjUyQ0Y3NkQ2NjA3REVENUJC
MDNCQTE1RjAeFw0yMzA0MDUxNDU2MjlaFw0yNDA0MDMxNTAxMjlaMDMxMTAvBgNV
BAMTKDA1RDE1Q0NFOUFENUQzNzM0MzlGMkYwNzg4N0JEODExQ0RFRDNDQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCApzfn4uLYQK1yIYDoQmON45Z
n6ZKqyBeHzfD1EXBnWqJYSFMW2+b0esMhtJ82pkOsAsz1iKxJApT5IOXVesauNWu
xWHPGyK0pMEwLQec4mhjRq8Y5J7VOLNFwGjB1KfVn1QS6zTmJThjHoZ6PbtGJNHs
Kwx8agBlRNJVURvoEfm0VpOx019nssqfY6FKh7GaZYqlCAQFs/bwxwRZW1OAs8ZP
rFciqpQky86S5KT/dY/NJS64+lpjNzqF0XszR3/T8Vs0eV6BKL8YON8jzGSJXrMw
R47CTnK+P6o6TqdD+f08hAEHYgWKUrsfivhT1CIB8Pn+RZH67uMJOKmsV1k3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBdFczprV03NDny8HiHvYEc3tPK4wHwYDVR0j
BBgwFoAUgkwclxkwZB9Sz3bWYH3tW7A7oV8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDlRVEx3OTkzYjVkV0xOcUFXNkI3MWJYUlk1MmczU2VNMXdDZnhDaEZj
UFIvMS84MjRDMUM5NzE5MzA2NDFGNTJDRjc2RDY2MDdERUQ1QkIwM0JBMTVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgyNEMxQzk3MTkzMDY0MUY1
MkNGNzZENjYwN0RFRDVCQjAzQkExNUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g5UVRMdzk5M2I1ZFdMTnFBVzZCNzFiWFJZNTJnM1NlTTF3Q2Z4Q2hGY1BSLzEv
MzQzNTJlMzEzODM1MmUzMTMyMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtuXgwDQYJKoZIhvcNAQELBQADggEBADh7ghKM
jR4DunwgIHTmg5yQQzOFIXVvzO+5Ba8tyNvnh29GcSuWNPzpsKqujiTyp3lS5WDB
/HnmzQoPPmZIxyAH59YC4XVyEnOAL6Rg9XZ05OWpH0E+TMOCPB/P8r+iaKO8lABN
kaY1RHATCqr3iS4X2O/n3V72odsObtkGImxaSZIG33mq8Nscw9KDs+duzDJ8PfMD
Ur+kcgaZP/iOxXCHZGNrd8OaalhOvkFqNk4eUgfets4EUAyMK+M6HYKTwtk/OMYD
1KGSeALxq5XYKz+tKZ4sRiGhj2NHDEzjqTIRwFKdAcvTUE1tWUOq77ahdd3c7rGy
tjOymk5oaY8VDp0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org